Security Compliance Analyst - RFPs & Audits (Hybrid)

F-Prime Capital; Austin (TX); On-site; USD 90,000 - 105,000; Full time

Benefits offered by this job

Company bonus pool

New hire equity

Job summary

Vestwell’s Corporate Information Technology team seeks an experienced, meticulous Information Security compliance analyst to monitor our compliance systems, review SOC controls, and develop automations to confirm compliance. You will collaborate with Security, Engineering, Legal, and Compliance to improve policies and practices.

This role is based in New York City or Austin and operates in a hybrid in-office model.

Qualifications

• Experience with SOC, ISO, and other audits.
• Experience responding to RFPs.
• Experience working cross-teams to implement new compliance processes.
• Vendor management and review experience.

Responsibilities

• Manage cybersecurity risk processes and remediation tracking in the GRC solution.
• Oversee cybersecurity compliance obligations across regulatory and customer requirements.
• Coordinate audits, evidence requests, and remediation with Legal, Compliance, IT and leaders.
• Support risk management for customers, vendors, and subcontractors including questionnaires and contract reviews.

Skills

SOC audits

ISO audits

RFP responses

Cross-functional collaboration

Tools

CrowdStrike

Vanta

Responsive

Job description

Vestwell’s Corporate Information Technology team seeks an experienced, meticulous Information Security compliance analyst to monitor our compliance systems, review SOC controls, and develop automations to confirm compliance. You will collaborate with Security, Engineering, Legal, and Compliance to improve policies and practices.

This role is based in New York City or Austin and operates in a hybrid in-office model.